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DETAILED ACTION 

This Office action is in response to Applicant's amendment and request for 

reconsideration filed on October 14, 2008. 

Claims 1-9, 1 1-20, 22-25 and 27-34 remain pending. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-9, 11-20, 22-25, 27-34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bruck et al. (US 6691165) ("Bruck"), in further view of Sato (US 
7,277,935) ("Sato"), in further view of McLaughlin et al. (US 2002/0165929) 
("McLauhglin"). 

As per claim 1 , Bruck teaches a system comprising: a network interface 
configured to communicate with nodes in a cluster (Fig. 6, ref. 614); a configuration 
subsystem coupled to a remote management broker (read as the single-point, see 
above, col. 3, lines 64-67), wherein the remote management broker is configured to 
distribute information between the nodes in the cluster (see col. 3, lines 45-55, 64-67 
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and col. 28, lines 2-16); a processor configured to perform actions, including: access 
the cluster from a single-point (single-point, see col. 3, lines 64-67); 
obtain information relating to at least two devices within the cluster (see Fig. 12 and col. 
21, lines 55-60, wherein remote management console monitors multiple server 
computers from a single interface); present the information to a user (see col. 3, lines 
64-67); and determine network management (NM) operations to perform to the cluster 
(col. 21, line 66-col. 22, lines 13); perform the determined NM operations (col. 21, line 
66-col. 22, lines 13); 

Bruck does not expressly teach determining whether the network management 
operations on the cluster, including said at least two devices, were applied correctly, 
and when the network management operations were not applied correctly, the 
processor is configured to roll back to a successful configuration. 

However, in the same art of network management and configuring, Sato teaches, 
a management system for configuring network devices (see abstract and Fig. 13A-13B), 
wherein, after configuration changes are made to the network device, a determination is 
made as to whether a network device has failed, whereby a network management 
device (see Fig. 13) then transmits original configuration information to restore the 
network device to a prior configuration (see col. 16, lines 10-17). 

One of skill in the art would have been motivated to combine the teachings of 
Bruck with the teachings of Sato, for determining if network management operations on 
at least two devices, were applied correctly, and if not, rolling back to a successful 
configuration, in order to allow Bruck's system to recover from an error state. 
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Furthermore, Bruck does not expressly teach applying a configuration lock that is 
intended to prevent other applications from performing network management operations 
on the at least two devices within a cluster. 

However, in the same art of server cluster management, McLaughlin teaches a 
system for performing network maintenance on a plurality of network resources within a 
cluster (see Fig. 1 and abstract). The system further allows for the locking of the 
network resources by a client while the network maintenance operations are being 
performed (see H0136-H0144). 

One of ordinary skill in the art would have been motivated to apply the teachings 
of Bruck with the teachings of McLaughlin for applying a configuration lock on the at 
least two devices in the cluster. The motivation for doing so would have been to prevent 
other applications from interfering with the network management operations at the two 
network devices (see McLaughlin, U0136-U0144). 

As per claim 2, Bruck further teaches the processor is configured to provide a 
command line interface configured to access the cluster (see col. 4, lines 1-4) 

As per claim 3, Bruck further teaches the processor is configured to provide a 
graphical user interface that is configured to access the cluster (see col. 4, lines 1-4). 
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As per claim 4, Bruck further teaches wherein the processor is configured to 
aggregate data relating to the devices within the cluster (see Fig. 12 and 13, read as an 
aggregate of data relating to devices within the cluster). 

As per claim 5, Bruck further teaches a secure transport configured to transport 
messages (see Secure Socket Layer, col. 27, lines 55-59); a remote management 
brocker server (see, Fig. 7, ref. 1703 and single-point, col. 3, lines 64-67) coupled to the 
secure transport (col. 27, lines 55-59); and a Remote Management Brick client coupled 
(see controller, i.e. internet browser application, Fig. 17, ref. 1702) to the secure 
transport (col. 27, lines 55-59). 

As per claim 6, Bruck further teaches wherein the Remote Management Broker is 
further configured to collect attributes from the Configuration Subsystem (see col. 3, 
lines 45-55, read as collecting management information from cluster servers). 

As per claim 7, Bruck further teaches wherein the messages include a header 
that is configured to authenticate the messages ("state sharing information messages", 
see col. 10, lines 9-18, including a "membership field", col. 10, lines 53-64). 

As per claim 8, Bruck further teaches wherein a magic field that identifies one or 
more of the messages as a remote management broker message (see "Signal Type", 
col. 10, lines 19-38, which identifies the type of message read as a "magic field"). 
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Furthermore, although Bruck teaches using the SSL protocol in the system (see 
Secure Socket Layer, col. 27, lines 55-59), as best understood, it is not necessarily the 
case that SSL protocol is being used to distribute the "state sharing information 
messages" (see col. 10, lines 9-18, read as "the messages") throughout the cluster 
network. Thus, it is not necessarily the case that the state sharing information message 
header includes a message authentication code. However, the examiner takes official 
notice of this limitation. The SSL protocol was well known in the art at the time of the 
invention, (see Hickman, Kipp. "The SSL protocol" , November 29, 1994), which includes 
a Message Authentication Code, "MAC-DATA", that acts as a shared secret (see 
Hickman, Kipp, "The SSL protocol" §1.2). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to distribute the "state sharing information messages" using the SSL protocol, 
in order to provide a secure method of distributing messages within the server cluster. 

As per claim 16 the combination of Bruck, Sato, and McLauhglin teaches the 
invention substantially as claimed as noted above. Furthermore, McLaughlin teaches 
applying a configuration lock that is intended to prevent other applications from 
performing network management operations on the devices within the cluster (see 
abstract and 1101 37-01 44) during a predetermined time (see 1J0199 wherein the lock 
client process 18 sets a timer for the length of the "retain interval", wherein the length of 
the retain interval is read as a predetermined time); and releasing the configuration lock 
after the network management operations are performed (see 1J01 99 "lock release"). 
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The same motivation that was utilized for combining Bruck and McLauhglin in 
claim 1 applies equally well to claim 16. 

Claims 9, 11-15, 17-20, 22-25 and 27-34 are rejected under the same rationale 
as claims 1-8, 16 and 34 since they recite substantially identical subject matter. Any 
differences between the claims do not result in patentably distinct claims and all of the 
limitations are taught by the above cited art. 



Response to Arguments 

Applicant's arguments with respect to claims 1-9, 1 1-20, 22-25, 27-34 have been 
considered but are moot in view of the new ground(s) of rejection. 

However, with respect to applicant's argument that "enabling and disabling 
component monitoring" is not a management operation, the examiner respectfully 
disagrees. 
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It is a well settled principle that the patent examiner must give the applicant's 
claim its broadest reasonable interpretation. (See MPEP § 2106 "While it is appropriate 
to use the specification to determine what applicant intends a term to mean, a positive 
limitation from the specification cannot be read into a claim that does not itself impose 
that limitation. A broad interpretation of a claim by USPTO personnel will reduce the 
possibility that the claim, when issued, will be interpreted more broadly than is justified 
or intended. An applicant can always amend a claim during prosecution to better reflect 
the intended scope of the claim'). 

Thus the examiner is broadly reading a management operation as any type of 
operation or step that is related to the management of a cluster of machines. Thus, it 
appears reasonable that, one of ordinary skill in the art would read the step of enabling 
and disabling a monitoring component, as a task that is closely related to the 
management of a cluster of machines, since, it allows a user at a "remote management 
console", see Fig. 1 2 and 1 3, with the ability to define which machines the user would 
like to monitor (i.e. manage). Furthermore, the step of enabling and disabling a 
monitoring component is inherently determined [based on a user's input] and carried out 
by a processor within the Remote Management Console. 

Nevertheless, also note that the remote management console may perform 
additional operations, such as "setting operating parameters of the distribution server 
cluster", see col. 19, lines 49-60 and col. 21, lines 19-27, which could also be 
interpreted as "management operations". 
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Furthermore, the examiner also respectfully disagrees with the applicant's 
arguments, directed to the examiner's reading of McLaughlin et al. (US 2002/0165929) 
("McLaughlin") for teaching a "configuration lock". 

As an initial matter "A configuration lock that is intended to prevent other 
applications from performing NM operations on the locked devices within the cluster 
while the user is logged-in" appears to be synonymous with the "locking mechanism" as 
taught by McLaughlin, see 1f01 37 "the lock mechanism can be described at a high-level 
as a coordination protocol in which nodes 12 agree to issue a "take ownership" 
command to a switch 14 only after obtaining control of a lock stored in the switch 14. 
Under this protocol the switch lock is controlled by at most one node 12 at any given 
time" also see McLaughlin's abstract wherein the locking mechanism is for the purposes 
of performing network maintenance on the network resource (i.e. switch). 

Furthermore, in 11001 4, McLaughlin also expressly states that the invention was 
not intended to be limited to performing maintenance on a single switch but also to 
perform maintenance on other network resources. Thus McLaughlin appears to suggest 
that other network resources, such as the server cluster machines in Bruck's invention, 
could have also been outfitted with a locking mechanism without departing from the 
scope of his invention. Finally, the obvious motivation for combining Bruck and 
McLaughlin would have been to prevent other users or applications from interfering with 
network management operations on the server cluster machines (see McLaughlin, 
H0136-H0144). 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRENDAN Y. HIGA whose telephone number is 
(571)272-5823. The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571 )272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Brendan Y Higa/ 
Examiner, Art Unit 2453 

/ARIO ETIENNE/ 

Supervisory Patent Examiner, Art Unit 2457 



